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PROTECTING AUDIO/VIDEO CONTENT DURING STORAGE 
AND PLAYBACK ON A PROCESSOR-BASED SYSTEM 

Background 

This invention relates to systems for receiving audio and video signals and, more 
particularly, to systems which may store audio/video information. 

A television set may receive an audio/video, or A/V, signal, which combines 
5 audio and video data. Increasingly, the A/V signal may be combined with other content, 
such as closed caption messages, program sub-titles, and even web pages. The A/V 
signal may enter the television set from a cable wire, a broadcast signal, or from a 
satellite signal, to name a few. 

For example, the television set may receive a variety of programming choices 
10 from the connection of a single cable wire. This is so because a cable service provider 
receives multiple signals, typically from multiple content providers and combines the 
signals together. The service provider may then broadcast the multiplexed signal over 
the single cable wire, which may then reach hundreds of thousands of homes. 

Both the service provider (cable company) and the content providers (network 
15 studios) generate revenue from the content of the multiplexed signal. Accordingly, to 
prevent piracy, the signal is typically encoded or encrypted during transmission. At the 
receiving end of the cable wire, a "cable box" or other mechanism may descramble or 
decrypt the signal for each paying household. 

Although television sets are well-known receivers of signals from cable service 
20 providers or other sources, other receivers are becoming more widely available. For 
example, a set-top box is a processor-based system that works with a television set. 
Set-top boxes are emerging as popular enhancements to television sets because they 
add features traditionally associated with personal computers to the television 
experience. For one, set-top boxes may include random access non-volatile storage 



capability, such as hard disk drives, compact disk read only memories (CD ROMs), or 
digital video disk random access memories (DVD RAMs). 

Broadcast store and replay, or BSR, is the ability of a receiver, such as a set-top 
box, to locally store portions of an audio/video signal, whether for short periods of time 
5 or for extended periods. Similar to using a video cassette recorder, or VCR, a set-top 
box user may store audio/video content on the random access storage of the set-top 
box itself. 

Audio/video, or A/V, content, stored on the set-top box, may be time-shifted. In 
other words, much like VCR tapes, the stored content may be played some time after 
10 being broadcast. Until the content is retrieved for viewing, it remains stored in the set- 
top box. 

Particularly for receivers which are connected to a network, the stored A/V 
content of a receiver may be vulnerable to surreptitious behavior, such as piracy. The 
media storing the A/V content may be connected to other circuitry by a bus. If the bus 

15 is open, e.g., accessible to other software or hardware, the A/V content may be copied. 

For example, some receivers may include a peripheral component interconnect, 
or PCI, bus. The PCI bus is compliant with the PCI Local Bus Specification, Revision 2.2 
(June 8, 1998, available from the PCI Special Interest Group, Portland, Oregon 97214). 
The PCI bus is an open bus with well-known, publicly available specifications. 

20 Alternatively, the media of the receiver may be removable, such as those 

including a removable hard disk drive. With removable media, the stored A/V content 
may be sent to another receiver. Thus, for some receivers, the stored A/V content may 
be stolen. 

Further, for receivers which are connected to other receivers, the stored A/V 
25 content may be downloaded to another site without leaving evidence of having been 
downloaded. An entire network of receivers, for example, may potentially retrieve the 
stored content from a single paying site. 
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Thus, there is a continuing need to provide protection for revenue-generating or 
other protection-needing audio/video content when stored on the random access media 
of a set-top box. 

Summary 

5 In accordance with one embodiment of the invention, a method includes 

intercepting a first signal from a video transmission, extracting a second signal from the 
first signal, encrypting the second signal and storing the encrypted second signal. 

Advantages and other features of the invention will become apparent from the 
following description, the drawings, and the claims. 

10 Brief Description of the Drawings 

Figure 1 is a block diagram of the route taken by a plurality of single channel A/V 
signals before being submitted to a receiver according to one embodiment of the 
invention; 

Figure 2 is a block diagram of a receiver according to one embodiment of the 
15 invention; 

Figure 3 is a flow diagram illustrating broadcast store and replay according to one 
embodiment of the invention; 

Figure 4 is a flow diagram illustrating broadcast store and replay according to a 
second embodiment of the invention; and 
20 Figure 5 is a block diagram of a computer system useful in implementing one 

embodiment of the present invention. 

Detailed Description 

In the following description, numerous details are set forth to provide an 
understanding of the present invention. However, it is to be understood by those skilled 
25 in the art that the present invention may be practiced without these details and that 
numerous variations or modifications from the described embodiments may be possible. 
For example, although reference is made to audio/video signals from a cable wire, such 
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signals may alternatively be broadcast and received by a television antenna, sent via 
satellite and received by a satellite receiver, or sent across a network to a receiver. 
Further, it is contemplated that other forms of transmission with content that includes 
audio or video signals (e.g., television content) may be included in further 
5 embodiments. 

As used in this description, the term audio/video (A/V) content is intended to 
include any type of audio and/or video data that may be transmitted or distributed to 
one or more receiving sites for presentation to viewers and/or listeners. An example of 
A/V content is television content. As used here, A/V content may refer to content that 
10 may include both an audio and video portion or one of an audio and video portion. 

Before being captured by a receiver as a single multiplexed signal, a number of 
content providers may provide single channel A/V signals to a service provider. The 
service provider may be a cable company, a satellite service provider, or a network 
administrator, as examples. The content providers may include cable networks, such as 
15 Cable News Network (CNN) or Home Box Office (HBO). The signals received by the 
service provider may each include network programming, movies, live performances, 
news programs, animation, and other broadcasts. 

A signal transmitting television programs or movies may include an enormous 
amount of audio and video, or A/V, data. To achieve a higher bit rate of transmission, a 
20 stream of A/V data may first be compressed. The compression may be performed by 
the content provider, prior to being sent to the service provider, for example. 

The service provider, upon receiving signals from a number of sources, typically 
adds distinct "codes" or "keys" to the video stream, and scrambles each signal in the 
video stream. This makes the keys for descrambling the signal available to a 
25 descrambler, at the receiving end of the signal. 

In Figure 1, a multiplexed transport signal 50, to be sent to a receiver 100, may 
begin as a plurality of single channel audio/video, or A/V, signals 30, according to one 
embodiment of the invention. Each single channel A/V signal 30 may be received from 
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one or more content providers 60, such as CNN, to a service provider 62, such as a local 
cable company. 

The single channel A/V signals 30 each enter a compressor 110. In the 
embodiment of Figure 1, the signals 30 are compressed prior to being received by the 

5 service provider 62. Each compressor 110 may employ one or more of a variety of 
available compression schemes. For example, the Moving Picture Experts Group, or 
MPEG, has approved several compression schemes. MPEG-2 refers to International 
Organization for Standardization (ISO) and International Electrotechnical Commission 
(IEC) Standard 13818-1 (systems), 13818-2 (video), 13818-3 (audio) and 13818-4 

10 (compliance) (1994). 

From each compressor 110, a compressed single channel A/V signal 35 is 
produced. The plurality of compressed single channel A/V signals 35 are sent to the 
service provider 62 for further processing. The signals 35 may be transmitted by 
satellite, across a network, or may be broadcast terrestrially to the service provider 62 

15 from the content provider 60. Alternatively, the single channel A/V signal 30 may be 
compressed after reaching the service provider 62. 

At the service provider 62, each compressed signal 35 may enter a scrambler 120 
for encrypting the signal 35. For example, the scrambler 120 may be a digital video 
broadcast (DVB) scrambler 120. DVB refers to European Telecommunication Standards 

20 Institute (ETS) Standard 300-421 (satellite), 300-429 (cable), 300-744 (terrestrial), and 
300-800 (interactive television) (1995). 

Additionally, the service provider 62 may add "keys" or "codes" to the signals 35, 
such that the signals 35 may be descrambled somewhere downstream, e.g., by paying 
subscribers 64. Thus, the service provider 62 may use a decryption key generator 130 

25 to produce a plurality of decryption keys 40, also to be sent to the scramblers 120. 
Typically, the decryption keys 40 change frequently. For example, some cable service 
providers may produce a new set of decryption keys for each channel twice every 
second. 
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Each scrambler 120 scrambles the compressed signal 35, then couples the 
scrambled and compressed signal with a decryption key 40, to produce a new signal 45. 
The signal 45 may then be combined with other compressed, scrambled, single channel 
A/V signals 45. 

5 The plurality of signals 45 may enter a multiplexer 132, where the signals 45 may 

be combined to form one signal 50. The multiplexed signal 50, suitable for wide-spread 
transmission to a plurality of subscribers 64, is known as a multiplexed transport (or 
broadcast) signal 50. The multiplexed transport signal 50 includes compressed and 
scrambled signals from potentially many A/V channels. 

10 At the receiving end, a number of subscribers 64 with receivers 100, such as 

television sets or set-top boxes, may receive the multiplexed transport signal 50. Inside 
each receiver 100, the process described in Figure 1 is essentially reversed before a 
single channel may be viewed. 

Some A/V receivers, such as set-top boxes, may include a broadcast store and 

15 replay (BSR) feature which enables A/V content to be time-shifted. In the receiver, the 
A/V signal may be stored on a random access storage medium, such as a hard disk 
drive, a CD ROM drive, a DVD RAM drive, and so on. For receivers with random access 
storage medium coupled to an open bus, such as a PCI bus, the contents of the random 
access storage medium, including the A/V signal, may be available to others besides the 

20 paying subscriber of the A/V content. 

According to one embodiment of the invention, a receiver, such as a set-top box, 
enables secure BSR by encrypting the decryption keys inside the receiver. The channel 
signals remain as provided to the receiver, compressed and scrambled, for example, 
while inside the receiver, until such time as the signals are to be viewed. Both the 

25 channel signals and the encrypted keys are then stored on random access media in the 
receiver. 

Because the decryption keys are used to unscramble the channel signals, 
encrypting the keys prior to storage may discourage the copying of both sets of signals. 
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Both the channel signal and its associated decryption keys are necessary for 
experiencing the A/V content of a channel. Yet, when one signal is "locked," the 
misappropriation of the other signal may be fruitless. Further, the scrambling scheme 
of the content provider remains intact during storage and playback of the channel signal 

5 upon the receiver. 

In Figure 2, the receiver 100 includes circuitry for reversing the operations 
performed on the single channel A/V signals 30 of Figure 1, according to one 
embodiment of the invention. That is, as will be shown, the multiplexed transport signal 
50 is demultiplexed, descrambled, and decompressed, before being experienced as 

10 intended. Additionally, the receiver 100 includes circuitry for both storing and replaying 
the A/V transmission, known also as broadcast store and replay (BSR). 

In Figure 2, a transport demultiplexer 140 receives the multiplexed transport 
signal 50, such as one sent to the subscriber 64 from the service provider 62 (Figure 1). 
Upon receiving a channel request, the multiplexed transport signal 50 is demultiplexed 

15 into both the requested single channel A/V signal 45 and its associated decryption keys 
40. 

For real-time channel requests, e.g., to view the signal 45 immediately, the single 
channel A/V signal 45 and its associated decryption keys 40 may enter a descrambler 
122. Accordingly, the single channel A/V signal 45 and the decryption keys 40 are sent 
20 to a multi-function chip 196, which includes circuitry for preparing the signals 45 and 40 
for viewing. 

The single channel A/V signal 45 and the decryption keys signal 40 may also be 
stored by the receiver 100. The storage of the signals 40 and 45 enable time-shifted 
requests, e.g., BSR requests to store the A/V content of a particular channel, to be 
25 made by the receiver 100. 

Thus, in Figure 2, from the transport demultiplexer 140, the single channel A/V 
signal 40 and its associated decryption keys 45 may enter a bus interface unit 160. In 
one embodiment of the invention, the bus interface unit 160 is a PCI bus interface unit. 
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The PCI bus interface unit 160 further receives a key 106 from an encryption unit 150a. 
In one embodiment of the invention, the encryption unit 150a may be part of the multi- 
function chip 196. 

In one embodiment of the invention, the encryption unit 150a is a protected 

5 content exchange, or PCX cipher unit. In a second embodiment of the invention, the 
encryption unit 150a is a Data Encryption Standard, or DES, encryption unit. In a third 
embodiment of the invention, the encryption unit 150a is a Rivest, Shamir and Adelman, 
or RSA, encryption unit. The encryption unit 150a may employ a variety of other 
encryption algorithms as well. 

10 In the PCX encryption embodiment, the decryption keys 40 are PCX-encrypted 

inside the PCI bus interface unit 160, using the PCX encryption key 106. Once 
encrypted, an encrypted decryption keys signal 146 is produced. The single channel 
A/V signal 45, also entering the PCI bus interface unit 160 remains untouched during 
encryption of the decryption keys 40. 

15 From the PCI bus interface unit 160, the single channel A/V signal 45 enters a 

random access storage unit 154. The newly encrypted decryption keys signal 146 also 
enters the random access storage unit 154. Thus, the local storage of the single 
channel A/V signal 45 as well as the encrypted decryption keys 146 is complete. 

Simultaneous to the storage operation, a selected one of a plurality of single 

20 channel A/V signal 45 and the decryption keys signal 40 may enter the descrambler 122. 
In one embodiment of the invention, the descrambler 122 is a digital video broadcast 
(DVB) descrambler and is part of the multi-function chip 196. 

From the descrambler 122, a descrambled, but still compressed, single channel 
A/V signal 35 emerges. The single channel A/V signal 35 enters an A/V decoder 112, 

25 where the signal 35 is decompressed. The decompressed signal is also divided into a 
video signal 30 and an audio signal 32 inside the A/V decoder 112. The audio signal 32 
is ready for submission to an audio receiver 142b, such as to speakers 142b. 
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Because video displays are typically analog-based, the multi-function chip 196 of 
Figure 2 further includes a video encoder 114. The video encoder 114 does not encode 
the video signal 30, but translates the video signal 30 from a digital signal 30 to an 
analog signal 34. The video encoder 114 thus receives the video signal 30 and 

5 produces a video signal 34 which may be received by a display 142a, outside the 
receiver 100. For digital video displays, the video encoder 114 may be bypassed. 

Thus, a descrambled, decompressed, and possibly translated video signal 34 
enters the video display 142a while the descrambled and decompressed audio signal 32 
is received by the speakers 142b. The multi-function chip 196 further may include 

10 circuitry to coordinate the asynchronous submissions such that the subscriber 64 may 
enjoy the A/V experience as intended. 

While the single channel A/V signal 45 and the encrypted decryption keys 146 are 
stored in the random access storage medium 154, the information may be retrieved by 
software or hardware which has access to the PCI bus (not shown). Alternatively, the 

15 receiver 100 may include a removable random access medium 154, such as a removable 
hard disk drive, possibly making the stored information available to entities besides the 
receiver 100. Or, if the receiver 100 is connected to other systems, such as on a 
network, for example, the stored information may be accessible by other entities. 
However, because the decryption keys 146 are encrypted, the scrambled A/V signal 45 

20 may not be descrambled until the keys 146 are decrypted. Thus, the value of the 
stored information may be limited to an entity capable of decrypting the encrypted 
decryption keys 146, e.g., the receiver 100 itself. 

In Figure 2, the replay mechanism of BSR may be invoked in response to a 
request to replay an A/V channel which was previously stored on the receiver 100. In 

25 one embodiment of the invention, the replay operation includes receiving both the 
single channel A/V signal 45 and the encrypted decryption keys 146 from the random 
access storage unit 154 into the bus interface unit 160. Accordingly, two-way arrows 
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connect between the bus interface unit 160 and the random access storage unit 154, in 
Figure 2. 

The PCI bus interface unit 160 is coupled to a decryption unit 150b, from which a 
decryption key 108 may be received. Due to the symmetry of encryption/decryption 
schemes, the decryption unit 150b may be part of an encryption/decryption unit 150, 
also including the encryption unit 150a. Alternatively, the decryption unit 150b may be 
a distinct functional unit. In the embodiment of Figure 2, both the encryption unit 150a 
and the decryption unit 150b are part of the multi-function chip 196 inside the receiver 
100. 

The encrypted decryption keys 146 may be decrypted inside the PCI bus 
interface unit 160. In one embodiment of the invention, the decryption unit 150b 
performs PCX decryption. In another embodiment of the invention, the decryption unit 
150b performs an operation to reverse the encryption performed by the encryption unit 
150a. Using the decryption key 108 from the decryption unit 150b, one or more 
decryption keys 40 may be produced. The decryption keys signal 40 produced in the 
PCI bus interface unit 160 may be identical to that supplied by the service provider 62 
(Figure 1). 

In one embodiment of the invention, the single channel A/V signal 45 leaves the 
PCI bus interface unit 160 and enters a buffer area 140a. The decryption keys signal 40 
likewise leaves the PCI bus interface unit 160 and enters a control word area 140b. 

In one embodiment of the invention, the buffer area 140a and the control word 
area 140b are essentially memory regions inside the transport demultiplexer 140. Such 
use of the transport demultiplexer 140 may be beneficial because the memory regions 
140a and 140b are not addressable by hackers and may thus be impervious to attack. 
However, other memory regions in a processor-based system may instead receive the 
signals 40 and 45. 

In one embodiment of the invention, the buffer area 140a and the control word 
area 140b are repositories for the temporary storage of the single channel A/V signal 45 
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and the decryption keys 40, respectively. These regions 140a and 140b of the transport 
demultiplexer 140 may thus be "staging areas" for presentation of the signals to other 
circuitry of the receiver 100. 

For example, the descrambler 122 expects two inputs: a signal to be 
5 descrambled and a keys signal for descrambling the first signal. The staging areas 
enable the two signals to independently reach the transport demultiplexer 140, such 
that the two signals 40 and 45 may be presented simultaneously to the descrambler 
122. 

Accordingly, in Figure 2, from the buffer area 140a and the control word area 

10 140b, the single channel A/V signal 45 and the decryption keys 40 enter the 
descrambler 122, in one embodiment of the invention. The descrambler 122, the A/V 
decoder 112, and the video encoder 114, operate just as for the real-time transmission 
of the channel signal, described above. 

In Figure 3, a flow diagram illustrates how the receiver 100 may process either a 

15 real-time request for a channel to be played, or the channel may be stored for later 
play. The multiplexed transport signal 50 is first received by the receiver 100 when the 
flow diagram begins (block 200). A request for one of the channels contained in the 
multiplexed transport signal 50 is made, such as by one of the subscribers 64 (block 
202). The transport demultiplexer 140 then isolates the requested channel 45 from the 

20 plurality of channels in the multiplexed transport signal 50. Also isolated by the 
transport demultiplexer 140 is the decryption keys signal 40 which is associated with the 
requested channel 45 (block 204). 

The receiver 100 may then either prepare the signal 45 for real-time play or may 
store the signal for later play, a time-shifted experience (diamond 206). If real-time 

25 play was requested, the channel 45 and the decryption keys signal 40 enter the 
descrambler 122 (block 208). The descrambler 122 uses the decryption keys 40 to 
descramble the channel signal 45, and produce the descrambled signal 35. 
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The descrambler 122 sends the descrambled signal 35 to the A/V decoder (block 
210). The A/V decoder 112 then decompresses the signal 35, producing the video 
signal 30 and the audio signal 32 (block 212). The video signal 30 may be sent to the 
video encoder 114, where the digital video signal 30 is translated to an analog video 
5 signal 34. Subsequently, the analog video signal 34 is sent to the display 142a (block 
214). Where a digital display is used, no translation from digital signal 30 to analog 
signal 34 is needed. 

The audio signal 32 is both descrambled and decompressed and is thus capable 
of being experienced. Accordingly, the audio signal 32 is sent to the speakers 142b 
10 (block 214). The A/V channel is thus experience (block 216). 

Alternatively, the request to store the signal channel A/V signal 45 may have 
been made (diamond 206). Accordingly, the single channel A/V signal 45 and its 
associated decryption key signal 40 enter the bus interface unit 160 (block 220). The 
decryption key signal 40 is then encrypted with the encryption key 106, which is sent to 
15 the bus interface unit 160 (block 222). Accordingly, an encrypted decryption key signal 
146 is produced in the bus interface unit 160. 

The encrypted keys signal 146 and the unchanged channel signal 45 are then 
stored in a random access storage unit 154 (block 224). The channel signal 45 remains 
scrambled as intended by the content provider 60 or the service provider 62. The 
20 random access storage unit 154 may include a variety of devices, such as hard disk 
drives, flash memory, or DVD-RAM devices. 

Until a request to play the now stored signal channel A/V signal 45 is made, the 
channel signal 45 remains in the random access storage unit 154 (diamond 226). 
However, once a request to play the channel 45 is made, the stored A/V channel 45 and 
25 the encrypted signal 146 are retrieved from the random access storage unit 154. From 
there, the signals 45 and 146 are sent to the bus interface unit 160 (block 228). 

The bus interface unit 160 receives the key 106, from the decryption unit 150b, 
used to decrypt the encrypted signal 146. This decryption process produces the 
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decryption keys signal 40 (block 230). The single channel A/V signal 45 enters the 
buffer area 140a while the decryption keys 40 enter the control word area 140b (block 
232). As described above, these regions 140a and 140b serve as staging areas for the 
single channel A/V signal 45 and the decryption keys signal 40, for presentation to the 

5 descrambler 122. In one embodiment of the invention, the buffer area 140a and the 
control word area 140b are part of the transport demultiplexer 140. 

The subsequent processing by the receiver 100 proceeds just as is the case for 
real-time play, as described above. That is, the descrambler 122 receives the single 
channel A/V signal 45 and the decryption key signal 40 (block 208), from the areas 140a 

10 and 140b. The descrambled signal is then sent to the A/V decoder 112 (block 210), the 
A/V decoder 112 decompresses the signal 35 (block 212), and the signal 30 is sent to 
the video display and speakers 142 (block 214). Finally, the requested A/V channel 30 
is experienced (block 216). Thus, whether in a real-time or a time-shifted manner, the 
receiver 100 is able to fulfill the channel request. 

15 in Figure 4, a flow diagram illustrates a second embodiment for implementing the 

receiver 100 according to the invention. Again, the receiver 100 may both store a 
requested channel for later viewing and prepare the channel for real-time A/V 
experience. This time, however, the receiver 100 automatically stores the requested 
A/V channel information prior to any viewing by the subscriber 64. 

20 As in Figure 3, the multiplexed transport signal 50 is sent to the receiver 100 

(block 300). A request for one of the channels contained in the multiplexed transport 
signal 50 is made, such as by the subscriber 64 (block 302). The transport 
demultiplexer 140 then isolates the requested channel 45 from the plurality of channels 
in the multiplexed transport signal 50. Also isolated by the transport demultiplexer 140 

25 is the decryption keys signal 40 associated with the requested channel 45 (block 304). 

Upon receiving both the requested channel 45 and its decryption keys 40, the 
receiver 100 stores the signal for later play, as a time-shifted experience as well as 
preparing the signal for real-time play. Accordingly, in one embodiment of the 
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invention, the single channel A/V signal 45 and its associated decryption keys signal 40 
enter the bus interface unit 160 (block 306). 

The decryption keys signal 40 is then encrypted with the encryption key 106, 
which is sent to the bus interface unit 160 (block 308), to produce an encrypted 
5 decryption keys signal 146. The encrypted keys signal 146 and the unchanged channel 
signal 45 are then stored in the random access storage unit 154 (block 310). 

In the embodiment of Figure 4, the subscriber 64 may at this time replay the A/V 
channel which has been stored. Accordingly, if a request to play an A/V channel 45 is 
made (diamond 312), the requested channel 45 and the encrypted signal 146 are 
10 retrieved from the random access storage unit 154 and sent to the bus interface unit 
160 (block 314). 

If, instead, no request to play a channel is made, the storage is complete. The 
receiver 100 performs no further activity, until such time as a request to play the 
channel 45 is made (diamond 312). 

15 After receiving the signals 45 and 146, the bus interface unit 160 receives the key 

106, from the decryption unit 150b, used to decrypt the encrypted signal 146. 
Decryption inside the bus interface unit 160 produces the decryption keys signal 40 
(block 316). The single channel A/V signal 45 enters the transport demultiplexer (buffer 
area) 140a while the decryption keys 40 enter the transport demultiplexer (control word 

20 area) 140b (block 318). 

The descrambler 122 receives the single channel A/V signal 45 and the 
decryption keys signal 40 (block 320), from the transport demultiplexer memory regions 
140a and 140b, respectively. The descrambler 122 uses the decryption keys 40 to 
descramble the channel signal 45, producing the descrambled signal 35. The 

25 descrambler 122 sends the descrambled signal 35 to the A/V decoder 112 (block 322). 
The A/V decoder 112 decompresses the signal 35, then separates out the video signal 
30 and the audio signal 32 (block 324). The digital video signal 30 (or the analog video 
signal 34, depending on the display type) is sent to the video display 142a while the 
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audio signal 32 is sent to the speakers 142b (block 326). The requested A/V channel is 
thus experienced (block 328). 

In Figure 5, a hardware implementation for one embodiment of the invention 
includes a processor 190 coupled to a north bridge 116. A memory 170 is also 
5 connected to the north bridge 116. The north bridge 116 is further connected to a PCI 
bus 156. 

Connected to the PCI bus 156 is the bus interface unit 160. The bus interface 
unit 160 is also coupled to the multi-function chip 196. In one embodiment of the 
invention, the multi-function chip 196 provides many of the features introduced above. 

10 For example, the multi-function chip 196 performs the functions of the descrambler 122, 
the A/V decoder 112, the encryption/decryption unit 150, and the video encoder 114. 

The multi-function chip 196 is further coupled to the transport demultiplexer 140 
described above. The transport demultiplexer 140 is connected to a tuner/forward error 
correction, or FEC, demodulator 162 which is coupled to either an antenna 164a, a cable 

15 164b or a satellite receiver 164c. The tuner/FEC demodulator 162 may perform a video 
capture function for the receiver 100. 

The PCI bus 156 further may connect to the random access storage unit 154 
from Figure 2. The random access storage medium 154 may be a hard disk drive, a 
flash memory, a CD-ROM, or a DVD-RAM device, as examples. A software program 

20 200, as described in the flow diagram of Figure 3, may be stored in the random access 
storage unit 154, in one embodiment of the invention. 

Thus, a system and method for providing secure storage of audio/video content 
on receivers with open buses is disclosed. When a multiplexed transport signal is 
spliced into individual channel signals and decryption code signals, the codes may then 

25 be encrypted before storage of both signals. While being stored in a random access 
medium, the A/V content remains in the scrambled state supplied to the receiver, such 
as content supplied by a cable service provider. The decryption code signals remain 
encrypted during storage. Once the stored content is to be replayed, the encrypted 

15 



decryption codes are decrypted. The descrambler then may receive both the scrambled 
A/V signal and the decryption keys, just as the signals would be presented during real- 
time experience of the A/V content. 

While the present invention has been described with respect to a limited number 
of embodiments, those skilled in the art will appreciate numerous modifications and 
variations therefrom. It is intended that the appended claims cover all such 
modifications and variations as fall within the true spirit and scope of this present 
invention. 
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What is claimed is: 



1 1. A method comprising: 

2 intercepting a first signal from a video transmission; 

3 extracting a second signal from the first signal; 

4 encrypting the second signal; and 

5 storing the encrypted second signal. 

1 2. The method of claim 1, further comprising: 

2 extracting a scrambled signal from the first signal; and 

3 storing the scrambled signal. 

1 3. The method of claim 1, further comprising: 

2 receiving a request for the scrambled signal to be descrambed; 

3 retrieving the encrypted signal; 

4 restoring the second signal by decrypting the encrypted signal; and 

5 using the second signal to descramble the scrambled signal. 

1 4. The method of claim 1, wherein encrypting the second signal further 

2 comprises using protected content exchange encryption. 

1 5. The method of claim 1, wherein storing the encrypted second signal 

2 further comprises storing the encrypted second signal on a random access storage 

3 medium. 

1 6. A system, comprising: 

2 a bus; 

3 a bus interface unit coupled to the bus wherein the bus interface unit 

4 receives a video signal; and 
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5 a multi-function unit coupled to the bus interface unit including logic to: 

6 decrypt a portion of the video signal that has previously been 

7 encrypted; and 

8 use the decrypted portion to prepare the video signal for viewing. 

1 7. The system of claim 6, wherein the multi-function unit further comprises: 

2 a descrambler; and 

3 a decoder. 

4 8. The system of claim 7, further comprising: 

5 a random access storage medium coupled to the bus interface unit 

6 wherein the video signal and the portion of the video signal that has previously 

7 been encrypted are stored. 

1 9. The system of claim 6, wherein the multi-function unit further comprises: 

2 an encryption unit; and 

3 a decryption unit. 

1 10. The system of claim 9, the encryption unit further including logic to 

2 encrypt a portion of the video signal using protected content exchange-based 

3 encryption. 

1 11. The system of claim 6, wherein the bus is a peripheral component 

2 interconnect bus. 

1 12. The system of claim 6, where the video signal is a single channel 

2 audio/video signal. 
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1 13. The system of claim 6, further comprising: 

2 a demultiplexer coupled to the bus; and 

3 a memory region for storing the portion of the video signal that has 

4 previously been encrypted. 

1 14. The system of claim 7, wherein the descrambler is a digital video 

2 broadcast descrambler. 

1 15. The system of claim 13, wherein the memory region is part of the 

2 demultiplexer. 

1 16. The system of claim 7, wherein the decoder is an MPEG decoder. 

1 17. The system of claim 9, wherein the decryption unit performs PCX-based 

2 decryption. 

1 18. An article comprising a medium storing instructions that cause a 

2 processor-based system to: 

3 receive a video signal; 

4 extract scrambled content and decryption keys from the video signal; 

5 encrypt the decryption keys; and 

6 store the scrambled content and the encrypted decryption keys. 

1 19. The article of claim 18, further storing instructions that cause a processor- 

2 based system to: 

3 receive a request for the scrambled content; 

4 decrypt the encrypted decryption keys; and 

5 send the scrambled content and the decrypted keys to a descrambler. 
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20. The article of claim 18, further storing instructions that cause a processor- 
based system to encrypt the decryption keys using protected content exchange-based 
encryption. 
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PROTECTING AUDIO/VIDEO CONTENT DURING STORAGE 
AND PLAYBACK ON A PROCESSOR-BASED SYSTEM 

Abstract of the Disclosure 

A system for protecting audio/video content during storage and playback on 
systems with open buses receives a multiplexed signal, including a plurality of A/V 
signals and decryption keys. Following a request for a channel, a single scrambled A/V 
signal and its associated decryption keys are extracted from the multiplexed signal. The 
decryption keys are PCX-encrypted while the scrambled signal remains untouched. Both 
the encrypted decryption keys and the scrambled signal are stored on the system. 
During storage, the surreptitious piracy of the signals may be avoided. 
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